brakit 0.8.3 → 0.8.5

package/dist/api.d.ts

@@ -1,6 +1,6 @@
 import { IncomingHttpHeaders } from 'node:http';
 
-type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS" | (string & {});
+type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
 type FlatHeaders = Record<string, string>;
 interface TracedRequest {
     id: string;
@@ -19,7 +19,7 @@ interface TracedRequest {
 }
 type RequestListener = (req: TracedRequest) => void;
 
-type Framework = "nextjs" | "remix" | "nuxt" | "vite" | "astro" | "custom" | "unknown";
+type Framework = "nextjs" | "remix" | "nuxt" | "vite" | "astro" | "flask" | "fastapi" | "django" | "custom" | "unknown";
 interface DetectedProject {
     framework: Framework;
     devCommand: string;
@@ -79,7 +79,7 @@ interface TracedError extends TelemetryEntry {
 }
 type NormalizedOp = "SELECT" | "INSERT" | "UPDATE" | "DELETE" | "OTHER";
 interface TracedQuery extends TelemetryEntry {
-    driver: "pg" | "mysql2" | "prisma" | string;
+    driver: "pg" | "mysql2" | "prisma" | "sdk";
     sql?: string;
     model?: string;
     operation?: string;
@@ -160,8 +160,11 @@ interface SecurityFinding {
     count: number;
 }
 
+declare const FINDINGS_DATA_VERSION = 1;
+
 type FindingState = "open" | "fixing" | "resolved";
 type FindingSource = "passive";
+type AiFixStatus = "fixed" | "wont_fix";
 interface StatefulFinding {
     /** Stable ID derived from rule + endpoint + description hash */
     findingId: string;
@@ -172,9 +175,13 @@ interface StatefulFinding {
     lastSeenAt: number;
     resolvedAt: number | null;
     occurrences: number;
+    /** What AI reported after attempting a fix */
+    aiStatus: AiFixStatus | null;
+    /** AI's summary of what was done or why it can't be fixed */
+    aiNotes: string | null;
 }
 interface FindingsData {
-    version: 1;
+    version: typeof FINDINGS_DATA_VERSION;
     findings: StatefulFinding[];
 }
 
@@ -220,7 +227,7 @@ interface PreparedInsightContext extends InsightContext {
     endpointGroups: ReadonlyMap<string, EndpointGroup>;
 }
 
-type InsightState = "open" | "resolved";
+type InsightState = FindingState;
 interface StatefulInsight {
     key: string;
     state: InsightState;
@@ -230,6 +237,8 @@ interface StatefulInsight {
     resolvedAt: number | null;
     /** Consecutive recompute cycles where the insight was not detected. */
     consecutiveAbsences: number;
+    aiStatus: AiFixStatus | null;
+    aiNotes: string | null;
 }
 
 declare class FindingStore {
@@ -244,6 +253,7 @@ declare class FindingStore {
     stop(): void;
     upsert(finding: SecurityFinding, source: FindingSource): StatefulFinding;
     transition(findingId: string, state: FindingState): boolean;
+    reportFix(findingId: string, status: AiFixStatus, notes: string): boolean;
     /**
      * Reconcile passive findings against the current analysis results.
      *
@@ -258,7 +268,9 @@ declare class FindingStore {
     getByState(state: FindingState): readonly StatefulFinding[];
     get(findingId: string): StatefulFinding | undefined;
     clear(): void;
-    private load;
+    private loadAsync;
+    /** Sync load for tests only — not used in production paths. */
+    loadSync(): void;
     private flush;
     private flushSync;
     private serialize;
@@ -317,8 +329,8 @@ declare class AdapterRegistry {
 }
 
 interface AnalysisUpdate {
-    insights: Insight[];
-    findings: SecurityFinding[];
+    insights: readonly Insight[];
+    findings: readonly SecurityFinding[];
     statefulFindings: readonly StatefulFinding[];
     statefulInsights: readonly StatefulInsight[];
 }
@@ -329,7 +341,8 @@ interface ChannelMap {
     "telemetry:error": Omit<TracedError, "id">;
     "request:completed": TracedRequest;
     "analysis:updated": AnalysisUpdate;
-    "store:cleared": void;
+    "findings:changed": readonly StatefulFinding[];
+    "store:cleared": undefined;
 }
 type Listener<T> = (data: T) => void;
 declare class EventBus {
@@ -362,6 +375,7 @@ interface TelemetryStoreInterface<T extends TelemetryEntry> {
 }
 interface RequestStoreInterface {
     capture(input: CaptureInput): TracedRequest;
+    add(entry: TracedRequest): void;
     getAll(): readonly TracedRequest[];
     clear(): void;
 }
@@ -377,6 +391,7 @@ interface MetricsStoreInterface {
 interface FindingStoreInterface {
     upsert(finding: SecurityFinding, source: FindingSource): StatefulFinding;
     transition(findingId: string, state: FindingState): boolean;
+    reportFix(findingId: string, status: AiFixStatus, notes: string): boolean;
     reconcilePassive(findings: readonly SecurityFinding[]): void;
     getAll(): readonly StatefulFinding[];
     getByState(state: FindingState): readonly StatefulFinding[];
@@ -393,6 +408,7 @@ interface AnalysisEngineInterface {
     getFindings(): readonly SecurityFinding[];
     getStatefulInsights(): readonly StatefulInsight[];
     getStatefulFindings(): readonly StatefulFinding[];
+    reportInsightFix(enrichedId: string, status: AiFixStatus, notes: string): boolean;
 }
 
 interface ServiceMap {
@@ -430,6 +446,7 @@ declare class AnalysisEngine {
     getFindings(): readonly SecurityFinding[];
     getStatefulFindings(): readonly StatefulFinding[];
     getStatefulInsights(): readonly StatefulInsight[];
+    reportInsightFix(enrichedId: string, status: AiFixStatus, notes: string): boolean;
     private scheduleRecompute;
     recompute(): void;
 }